$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: wR9oJRexjNO1XRvLJuJ8CbEY26Sma8gsKzaj3dzh2S0= Subject key identifier: 6A:3A:C1:EF:43:51:60:98:D3:37:2E:87:B9:24:67:2E:44:A7:88:7F Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 51 Signing time: Sun 27 Apr 2025 06:09:48 +0000 Manifest this update: Sun 27 Apr 2025 06:09:48 +0000 Manifest next update: Sun 04 May 2025 06:09:48 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: tvZ8CQfwvAYS3ZjI+HDiyaQVYl3WBmiPMF5Ak9bZuwA=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Apr 27 06:09:48 2025 GMT Not After : May 4 06:09:48 2025 GMT Subject: CN=680dca2c-75c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:ee:a5:e0:b1:0e:0e:95:aa:6f:a9:83:1e: 91:48:84:79:45:3e:6c:42:b8:a9:5c:fc:1b:9e:0f: ab:96:66:82:e8:6c:e6:dd:2e:21:e7:6d:49:5f:94: 89:a2:6d:1a:3e:11:a6:1b:bf:81:e7:9a:1a:f2:7c: 2f:9a:2b:62:5b:58:38:55:77:fe:7d:69:8c:d0:4a: 40:9b:e3:a8:77:db:38:98:76:aa:50:0a:ff:cd:84: a1:96:99:da:a1:bc:6f:fe:5f:dd:de:eb:2c:8c:8e: 8f:29:bb:32:5f:42:7b:76:6b:ea:41:59:00:7c:c5: 7a:78:1b:dc:01:7e:1d:71:55:da:e8:13:64:94:e7: 9d:a6:0e:0c:e0:cb:f0:a5:b7:50:e1:61:04:0e:4b: ce:78:ad:b4:be:10:90:13:ec:62:31:a2:91:b3:d5: bc:e3:1b:b1:29:c4:a6:86:4d:d5:1c:21:e9:29:9b: 05:3b:2b:6d:3b:8c:56:87:79:18:ab:b6:b0:3c:4d: 31:40:23:85:af:df:f1:0e:80:f4:3b:f1:36:1a:fe: 00:7e:30:1a:d1:3c:04:51:e3:34:05:e6:93:ea:94: dd:09:94:2c:89:40:1c:b9:74:a0:8a:67:e0:6e:09: 07:7e:5f:ca:17:bc:01:df:48:39:32:b1:17:3d:48: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3A:C1:EF:43:51:60:98:D3:37:2E:87:B9:24:67:2E:44:A7:88:7F X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:51:a0:61:ce:dc:b4:f7:09:a1:84:6d:48:6a:1d:06:b5:4b: 9e:e2:99:09:74:2f:57:2f:e0:8c:cf:70:8b:a2:f5:ad:87:49: 61:f4:90:e2:cc:92:7a:d4:d2:09:96:ef:7a:f8:d0:76:04:ec: fc:18:f8:83:d9:92:45:ad:86:0e:b3:78:1c:74:12:68:b6:1c: ea:36:81:36:33:63:36:0c:57:7c:b8:a7:97:9e:94:e5:27:30: 94:fc:4b:79:4a:68:9d:43:44:ae:7c:e7:d3:fc:82:fb:f2:b5: d7:ad:f1:e4:ec:7f:49:f1:0a:23:24:b6:13:ed:ba:25:31:a1: b1:28:b2:32:bf:49:92:78:38:14:80:7a:48:44:dd:ba:9e:f0: 4a:ad:53:53:db:f1:03:03:f2:2d:5d:99:2a:4d:a1:f6:c7:2e: dd:37:3b:cb:b0:73:b1:0c:37:fb:09:af:33:76:f4:42:56:fd: 12:b5:41:a2:72:b7:3c:6e:5e:a1:b6:89:bb:4e:dc:dd:06:e5: b0:d1:ae:f2:db:8f:b1:db:78:03:fb:5a:18:c0:f9:d6:b5:90: 9c:b8:81:e0:cb:ad:d0:3f:d4:90:bb:a7:01:e2:1e:27:9c:80: c4:52:63:20:46:8b:43:b5:e4:83:3c:e0:57:dd:23:d8:c5:2d: c4:9c:52:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA0MjcwNjA5NDhaFw0yNTA1MDQwNjA5NDhaMBgxFjAUBgNV BAMTDTY4MGRjYTJjLTc1YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTVe6l4LEODpWqb6mDHpFIhHlFPmxCuKlc/BueD6uWZoLobObdLiHnbUlflImi bRo+EaYbv4HnmhryfC+aK2JbWDhVd/59aYzQSkCb46h32ziYdqpQCv/NhKGWmdqh vG/+X93e6yyMjo8puzJfQnt2a+pBWQB8xXp4G9wBfh1xVdroE2SU552mDgzgy/Cl t1DhYQQOS854rbS+EJAT7GIxopGz1bzjG7EpxKaGTdUcIekpmwU7K207jFaHeRir trA8TTFAI4Wv3/EOgPQ78TYa/gB+MBrRPARR4zQF5pPqlN0JlCyJQBy5dKCKZ+Bu CQd+X8oXvAHfSDkysRc9SC+ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUajrB70NR YJjTNy6HuSRnLkSniH8wHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5RoGHO3LT3CaGEbUhqHQa1S57imQl0L1cv4IzPcIui9a2HSWH0kOLM knrU0gmW73r40HYE7PwY+IPZkkWthg6zeBx0Emi2HOo2gTYzYzYMV3y4p5eelOUn MJT8S3lKaJ1DRK5859P8gvvytdet8eTsf0nxCiMkthPtuiUxobEosjK/SZJ4OBSA ekhE3bqe8EqtU1Pb8QMD8i1dmSpNofbHLt03O8uwc7EMN/sJrzN29EJW/RK1QaJy tzxuXqG2ibtO3N0G5bDRrvLbj7HbeAP7WhjA+da1kJy4geDLrdA/1JC7pwHiHiec gMRSYyBGi0O15IM84FfdI9jFLcScUqs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net